+++ /dev/null
-/*
- * Copyright (c) 2000-2001,2011,2014 Apple Inc. All Rights Reserved.
- *
- * The contents of this file constitute Original Code as defined in and are
- * subject to the Apple Public Source License Version 1.2 (the 'License').
- * You may not use this file except in compliance with the License. Please obtain
- * a copy of the License at http://www.apple.com/publicsource and read it before
- * using this file.
- *
- * This Original Code and all software distributed under the License are
- * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS
- * OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES, INCLUDING WITHOUT
- * LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
- * PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT. Please see the License for the
- * specific language governing rights and limitations under the License.
- */
-
-
-/*
- * AppleTPSession.cpp - general session support and (mostly) unimplemented functions
- */
-
-#include "AppleTPSession.h"
-#include "TPCertInfo.h"
-#include "TPCrlInfo.h"
-#include "tpCrlVerify.h"
-#include "tpdebugging.h"
-#include <Security/oidsalg.h>
-
-AppleTPSession::AppleTPSession(
- CSSM_MODULE_HANDLE theHandle,
- CssmPlugin &plug,
- const CSSM_VERSION &version,
- uint32 subserviceId,
- CSSM_SERVICE_TYPE subserviceType,
- CSSM_ATTACH_FLAGS attachFlags,
- const CSSM_UPCALLS &upcalls)
- : TPPluginSession(theHandle, plug, version, subserviceId,
- subserviceType,attachFlags, upcalls)
-{
-}
-
-AppleTPSession::~AppleTPSession()
-{
-}
-
-void AppleTPSession::CertCreateTemplate(CSSM_CL_HANDLE CLHandle,
- uint32 NumberOfFields,
- const CSSM_FIELD CertFields[],
- CssmData &CertTemplate)
-{
- CssmError::throwMe(CSSM_ERRCODE_FUNCTION_NOT_IMPLEMENTED);
-}
-
-void AppleTPSession::CrlVerify(CSSM_CL_HANDLE CLHandle,
- CSSM_CSP_HANDLE CSPHandle,
- const CSSM_ENCODED_CRL &CrlToBeVerified,
- const CSSM_CERTGROUP &SignerCertGroup,
- const CSSM_TP_VERIFY_CONTEXT *VerifyContext,
- CSSM_TP_VERIFY_CONTEXT_RESULT *RevokerVerifyResult)
-{
- /* verify input args */
- if(RevokerVerifyResult != NULL) {
- /* not yet, but probably someday */
- CssmError::throwMe(CSSMERR_TP_INVALID_REQUEST_INPUTS);
- }
- switch(CrlToBeVerified.CrlType) {
- case CSSM_CRL_TYPE_X_509v1:
- case CSSM_CRL_TYPE_X_509v2:
- break;
- default:
- CssmError::throwMe(CSSMERR_TP_INVALID_CRL_TYPE);
- }
- switch(CrlToBeVerified.CrlEncoding) {
- case CSSM_CRL_ENCODING_BER:
- case CSSM_CRL_ENCODING_DER:
- break;
- default:
- CssmError::throwMe(CSSMERR_TP_INVALID_CRL_ENCODING);
- }
-
- /* optional arguments */
- CSSM_TIMESTRING cssmTimeStr = NULL;
- const CSSM_TP_CALLERAUTH_CONTEXT *cred = NULL;
- uint32 NumberOfAnchorCerts = 0;
- CSSM_DATA_PTR AnchorCerts = NULL;
- CSSM_DL_DB_LIST_PTR DBList = NULL;
- CSSM_APPLE_TP_ACTION_FLAGS actionFlags = 0;
- CSSM_APPLE_TP_ACTION_DATA *actionData = NULL;
-
- if(VerifyContext != NULL) {
- cred = VerifyContext->Cred;
- actionData =
- (CSSM_APPLE_TP_ACTION_DATA *)VerifyContext->ActionData.Data;
- if(actionData != NULL) {
- switch(actionData->Version) {
- case CSSM_APPLE_TP_ACTION_VERSION:
- if(VerifyContext->ActionData.Length !=
- sizeof(CSSM_APPLE_TP_ACTION_DATA)) {
- CssmError::throwMe(CSSMERR_TP_INVALID_ACTION_DATA);
- }
- break;
- /* handle backwards versions here if we ever go
- * beyond version 0 */
- default:
- CssmError::throwMe(CSSMERR_TP_INVALID_ACTION_DATA);
- }
- actionFlags = actionData->ActionFlags;
- }
- }
- if(cred != NULL) {
- cssmTimeStr = cred->VerifyTime;
- NumberOfAnchorCerts = cred->NumberOfAnchorCerts;
- AnchorCerts = cred->AnchorCerts;
- DBList = cred->DBList;
- }
-
- /* this must be parseable, throw immediately if not */
- TPCrlInfo crlToVerify(CLHandle, CSPHandle, &CrlToBeVerified.CrlBlob,
- TIC_NoCopy, cssmTimeStr);
-
- /* Both required at the API but in fact may be empty */
- TPCertGroup inCertGroup(SignerCertGroup, CLHandle, CSPHandle, *this,
- cssmTimeStr, // optional 'this' time
- false, // firstCertMustBeValid
- TGO_Group);
- TPCertGroup gatheredCerts(*this, TGO_Group);
-
- /* common CRL/OCSP verify parameters */
- TPVerifyContext vfyCtx(*this,
- CLHandle,
- CSPHandle,
- cssmTimeStr,
- NumberOfAnchorCerts,
- AnchorCerts,
- &inCertGroup,
- NULL, // no CRLs, we're on our own
- gatheredCerts,
- DBList,
- kRevokeCrlBasic,
- actionFlags,
- NULL, // crlOpts
- NULL, // OCSP opts
- &CSSMOID_APPLE_TP_REVOCATION_CRL,
- NULL, // UT policyString
- 0,
- CSSM_KEYUSE_VERIFY);
-
- /*
- * We assert the doCrlVerify flag to ensure CRL verification
- * if intermediate certs which verifyWithContext() gathers to
- * verify this CRL.
- */
- CSSM_RETURN crtn = crlToVerify.verifyWithContext(vfyCtx, NULL, true);
- if(crtn) {
- tpCrlDebug("CrlVerify failure");
- CssmError::throwMe(crtn);
- }
-}
-
-void AppleTPSession::CertReclaimKey(const CSSM_CERTGROUP &CertGroup,
- uint32 CertIndex,
- CSSM_LONG_HANDLE KeyCacheHandle,
- CSSM_CSP_HANDLE CSPHandle,
- const CSSM_RESOURCE_CONTROL_CONTEXT *CredAndAclEntry)
-{
- CssmError::throwMe(CSSM_ERRCODE_FUNCTION_NOT_IMPLEMENTED);
-}
-
-/*** CertGroupVerify, CertGroupConstruct in TPCertGroup.cpp ***/
-
-void AppleTPSession::CertSign(CSSM_CL_HANDLE CLHandle,
- CSSM_CC_HANDLE CCHandle,
- const CssmData &CertTemplateToBeSigned,
- const CSSM_CERTGROUP &SignerCertGroup,
- const CSSM_TP_VERIFY_CONTEXT *SignerVerifyContext,
- CSSM_TP_VERIFY_CONTEXT_RESULT *SignerVerifyResult,
- CssmData &SignedCert)
-{
- CssmError::throwMe(CSSM_ERRCODE_FUNCTION_NOT_IMPLEMENTED);
-}
-
-void AppleTPSession::TupleGroupToCertGroup(CSSM_CL_HANDLE CLHandle,
- const CSSM_TUPLEGROUP &TupleGroup,
- CSSM_CERTGROUP_PTR &CertTemplates)
-{
- CssmError::throwMe(CSSM_ERRCODE_FUNCTION_NOT_IMPLEMENTED);
-}
-
-void AppleTPSession::ReceiveConfirmation(const CssmData &ReferenceIdentifier,
- CSSM_TP_CONFIRM_RESPONSE_PTR &Responses,
- sint32 &ElapsedTime)
-{
- CssmError::throwMe(CSSM_ERRCODE_FUNCTION_NOT_IMPLEMENTED);
-}
-
-void AppleTPSession::PassThrough(CSSM_CL_HANDLE CLHandle,
- CSSM_CC_HANDLE CCHandle,
- const CSSM_DL_DB_LIST *DBList,
- uint32 PassThroughId,
- const void *InputParams,
- void **OutputParams)
-{
- CssmError::throwMe(CSSM_ERRCODE_FUNCTION_NOT_IMPLEMENTED);
-}
-
-void AppleTPSession::CertRemoveFromCrlTemplate(CSSM_CL_HANDLE CLHandle,
- CSSM_CSP_HANDLE CSPHandle,
- const CssmData *OldCrlTemplate,
- const CSSM_CERTGROUP &CertGroupToBeRemoved,
- const CSSM_CERTGROUP &RevokerCertGroup,
- const CSSM_TP_VERIFY_CONTEXT &RevokerVerifyContext,
- CSSM_TP_VERIFY_CONTEXT_RESULT &RevokerVerifyResult,
- CssmData &NewCrlTemplate)
-{
- CssmError::throwMe(CSSM_ERRCODE_FUNCTION_NOT_IMPLEMENTED);
-}
-
-void AppleTPSession::CertRevoke(CSSM_CL_HANDLE CLHandle,
- CSSM_CSP_HANDLE CSPHandle,
- const CssmData *OldCrlTemplate,
- const CSSM_CERTGROUP &CertGroupToBeRevoked,
- const CSSM_CERTGROUP &RevokerCertGroup,
- const CSSM_TP_VERIFY_CONTEXT &RevokerVerifyContext,
- CSSM_TP_VERIFY_CONTEXT_RESULT &RevokerVerifyResult,
- CSSM_TP_CERTCHANGE_REASON Reason,
- CssmData &NewCrlTemplate)
-{
- CssmError::throwMe(CSSM_ERRCODE_FUNCTION_NOT_IMPLEMENTED);
-}
-
-void AppleTPSession::CertReclaimAbort(CSSM_LONG_HANDLE KeyCacheHandle)
-{
- CssmError::throwMe(CSSM_ERRCODE_FUNCTION_NOT_IMPLEMENTED);
-}
-
-void AppleTPSession::CrlCreateTemplate(CSSM_CL_HANDLE CLHandle,
- uint32 NumberOfFields,
- const CSSM_FIELD CrlFields[],
- CssmData &NewCrlTemplate)
-{
- CssmError::throwMe(CSSM_ERRCODE_FUNCTION_NOT_IMPLEMENTED);
-}
-
-void AppleTPSession::CertGroupToTupleGroup(CSSM_CL_HANDLE CLHandle,
- const CSSM_CERTGROUP &CertGroup,
- CSSM_TUPLEGROUP_PTR &TupleGroup)
-{
- CssmError::throwMe(CSSM_ERRCODE_FUNCTION_NOT_IMPLEMENTED);
-}
-
-void AppleTPSession::FormRequest(const CSSM_TP_AUTHORITY_ID *PreferredAuthority,
- CSSM_TP_FORM_TYPE FormType,
- CssmData &BlankForm)
-{
- CssmError::throwMe(CSSM_ERRCODE_FUNCTION_NOT_IMPLEMENTED);
-}
-
-void AppleTPSession::CrlSign(CSSM_CL_HANDLE CLHandle,
- CSSM_CC_HANDLE CCHandle,
- const CSSM_ENCODED_CRL &CrlToBeSigned,
- const CSSM_CERTGROUP &SignerCertGroup,
- const CSSM_TP_VERIFY_CONTEXT *SignerVerifyContext,
- CSSM_TP_VERIFY_CONTEXT_RESULT *SignerVerifyResult,
- CssmData &SignedCrl)
-{
- CssmError::throwMe(CSSM_ERRCODE_FUNCTION_NOT_IMPLEMENTED);
-}
-
-void AppleTPSession::CertGroupPrune(CSSM_CL_HANDLE CLHandle,
- const CSSM_DL_DB_LIST &DBList,
- const CSSM_CERTGROUP &OrderedCertGroup,
- CSSM_CERTGROUP_PTR &PrunedCertGroup)
-{
- CssmError::throwMe(CSSM_ERRCODE_FUNCTION_NOT_IMPLEMENTED);
-}
-
-void AppleTPSession::ApplyCrlToDb(CSSM_CL_HANDLE CLHandle,
- CSSM_CSP_HANDLE CSPHandle,
- const CSSM_ENCODED_CRL &CrlToBeApplied,
- const CSSM_CERTGROUP &SignerCertGroup,
- const CSSM_TP_VERIFY_CONTEXT *ApplyCrlVerifyContext,
- CSSM_TP_VERIFY_CONTEXT_RESULT &ApplyCrlVerifyResult)
-{
- CssmError::throwMe(CSSM_ERRCODE_FUNCTION_NOT_IMPLEMENTED);
-}
-
-void AppleTPSession::CertGetAllTemplateFields(CSSM_CL_HANDLE CLHandle,
- const CssmData &CertTemplate,
- uint32 &NumberOfFields,
- CSSM_FIELD_PTR &CertFields)
-{
- CssmError::throwMe(CSSM_ERRCODE_FUNCTION_NOT_IMPLEMENTED);
-}
-
-void AppleTPSession::ConfirmCredResult(const CssmData &ReferenceIdentifier,
- const CSSM_TP_CALLERAUTH_CONTEXT *CallerAuthCredentials,
- const CSSM_TP_CONFIRM_RESPONSE &Responses,
- const CSSM_TP_AUTHORITY_ID *PreferredAuthority)
-{
- CssmError::throwMe(CSSM_ERRCODE_FUNCTION_NOT_IMPLEMENTED);
-}
-
-void AppleTPSession::FormSubmit(CSSM_TP_FORM_TYPE FormType,
- const CssmData &Form,
- const CSSM_TP_AUTHORITY_ID *ClearanceAuthority,
- const CSSM_TP_AUTHORITY_ID *RepresentedAuthority,
- AccessCredentials *Credentials)
-{
- CssmError::throwMe(CSSM_ERRCODE_FUNCTION_NOT_IMPLEMENTED);
-}
-
projects / apple / security.git / blobdiff